Vulnerability in Kernel (Linux): hwmon (w83792d) NULL Pointer Dereference
Summary
GSD-2021-1001602: hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field. Affects Kernel versions < 200ced5ba724d8bbf29dfac4ed1e17a39ccaccd1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a critical component of the Linux operating system that provides core functionality and interfaces with hardware devices. It manages system resources, facilitates communication between software and hardware, and ensures proper operation of the system. The hwmon subsystem within the Kernel is responsible for monitoring and controlling hardware sensors, such as temperature and voltage sensors. The w83792d driver is a specific driver within hwmon that supports monitoring of certain hardware devices. However, a vulnerability has been identified in the w83792d driver that can lead to a NULL pointer dereference, potentially resulting in a system crash or other unexpected behavior.
Vulnerability Detail
The vulnerability in the w83792d driver arises from the presence of an unnecessary structure field. This field can be accessed when it is not properly initialized, leading to a NULL pointer dereference. An attacker may be able to exploit this vulnerability by sending specially crafted input to the affected system, potentially causing a denial-of-service condition or executing arbitrary code with elevated privileges. The impact and attack plausibility of this vulnerability have not been proven yet. It is important to note that this vulnerability has been fixed in the Linux Kernel version v5.4.151 by commit 200ced5ba724d8bbf29dfac4ed1e17a39ccaccd1.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As this vulnerability has been fixed in the Linux Kernel version v5.4.151, there is no specific workaround available. It is advised to update to the fixed version as soon as possible.
Conclusion
In conclusion, a vulnerability has been identified in the w83792d driver of the Linux Kernel, which can lead to a NULL pointer dereference. This vulnerability has been fixed in the Linux Kernel version v5.4.151. It is recommended to update to the fixed version or wait for an updated Kernel package from the Linux distribution. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The impact of this vulnerability can range from a system crash to potential execution of arbitrary code with elevated privileges, depending on how it is exploited.
Yes, an attacker can potentially exploit this vulnerability remotely by sending specially crafted input to the affected system.
There is currently no evidence of active exploitation of this vulnerability.
The primary mitigation for this vulnerability is to update the Linux Kernel to version v5.4.151 or later, which includes the fix.
More information about the fix can be found in the commit 200ced5ba724d8bbf29dfac4ed1e17a39ccaccd1 in the official Linux Kernel repository.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
